The proposal is significant, but it is not a penalty
Britain's Competition and Markets Authority proposed on 16 October to designate Microsoft with strategic market status in its business software ecosystem. The regulator is consulting before making a final designation decision, which it says must come by the statutory deadline in February 2027. A proposed designation is not a finding that Microsoft has broken competition law and does not itself change the price or licence terms in an existing customer contract.
The CMA says Microsoft's business software is used by more than one million UK businesses and public-sector organisations, with around 20 million monthly users. It examined operating systems, productivity suites, security software, server operating systems and relational database management. Those are overlapping markets, but the regulator's concern is the combined ecosystem and the difficulty of switching or integrating alternatives.
Copilot and AI choice sit at the centre of the next investigation
The CMA's indicative roadmap raises a question that procurement teams already face: can a company adopt an independent AI assistant without losing functionality, security controls or workflow integration inside its existing office suite? The regulator proposes to examine whether rival AI providers can compete fairly with Microsoft Copilot. It has not announced a specific interoperability order or required Microsoft to unbundle a named product.
That distinction matters for UK software developers. A consultation creates an opportunity to present technical evidence about APIs, default settings, access to data and the cost of integration. It is not a promise that a competitor will obtain a particular feature or distribution channel. For customers, a practical test is whether a new product can work with existing identity, documents and compliance processes without disproportionate migration costs.
Security bundling and cloud licensing are separate levers
The roadmap also identifies the integration and bundling of security products, plus customers' freedom to choose where software licences are deployed. The commercial effect of a security bundle depends on pricing, default configuration and the degree to which alternatives can interoperate. Bundling can reduce administration and sometimes cost; it can also make competitive entry harder if switching one component becomes expensive.
Cloud licensing adds another layer. A business may want to run workloads on a rival cloud while keeping familiar productivity or server products. The CMA is examining whether licence terms and technical conditions constrain that choice. Procurement teams should map both contractual restrictions and actual engineering migration costs, rather than assume that the cheapest quoted infrastructure price is the lowest total cost.
The CMA is already pursuing a different cloud track
Alongside the Microsoft proposal, the regulator updated its engagement with Microsoft and Amazon Web Services on cloud competition. It cited steps involving data-centre connectivity with rivals, removal or reduction of certain transfer fees, interoperability requests and tools to automate migration tasks. It also said work remains on identity and access management and portable architectures.
Those developments should not be conflated with a final strategic market status decision for business software. The CMA has kept the possibility of a separate full cloud SMS investigation under review and plans another update in spring 2027. Different processes may ultimately affect the same customer, but their legal status and timelines are not interchangeable.
What UK businesses should do before February
Software buyers should inventory the systems that would be hardest to replace: identity, email, collaboration, security, databases and applications dependent on proprietary interfaces. A realistic switching-cost model includes retraining, data migration, downtime, contract notice periods and audit requirements. That exercise is useful whether or not the CMA makes a designation.
Vendors and trade groups can contribute evidence to the consultation, particularly concrete examples of technical barriers or customer harm. The strongest policy outcome would be more credible choices without weakening security or reliability. Until the CMA reaches a final decision and adopts any further measures, businesses should treat its roadmap as a regulatory signal, not a set of enforceable new obligations.